Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3836BECC3C611EFAB485485762E951A.roa
File: F3836BECC3C611EFAB485485762E951A.roa (raw, json)
Hash identifier: NS1yKeEY06NgH9Q/7CIWDNt5GpakO7Y9sAkq9Fe86rY=
Subject key identifier: F1:25:DC:8B:95:C8:99:20:6B:94:BF:CC:82:34:80:89:39:8D:67:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3836BECC3C611EFAB485485762E951A.roa
Signing time: Thu 26 Dec 2024 20:21:13 +0000
ROA not before: Thu 26 Dec 2024 20:21:09 +0000
ROA not after: Sun 12 Dec 2027 20:21:09 +0000
asID: 17561
IP address blocks: 154.83.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75738 (0x127da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:21:09 2024 GMT
Not After : Dec 12 20:21:09 2027 GMT
Subject: CN=676dbab9-5525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:ce:39:02:7e:3b:7b:82:9d:a5:97:e6:78:
f4:07:d9:ac:6c:b9:8c:ed:1b:1e:0f:a0:7e:85:e3:
78:52:2a:dc:2a:14:87:03:15:6a:5a:81:1b:59:8e:
c6:b8:e4:b1:ef:a2:46:bb:92:62:77:50:99:6e:10:
01:8a:8a:7a:b2:7a:74:ee:99:c4:4e:05:b5:36:8c:
8e:bb:3f:b0:5d:0e:9e:33:f3:c2:4e:35:84:c8:80:
81:b9:9d:ea:a9:35:52:93:ad:3b:9c:0f:4d:f7:d6:
1e:be:3e:65:d2:3c:26:dd:a6:8a:9f:7e:9a:4e:bc:
0a:27:19:62:aa:f1:08:27:c7:28:d2:95:83:06:0b:
b8:b3:7c:7b:a6:45:ca:b1:e8:d1:71:24:d4:3c:76:
11:45:a4:15:72:1f:80:d0:79:eb:fb:82:a1:4f:8a:
01:79:f0:9a:ac:de:1c:1b:ae:f9:33:b4:d9:e7:df:
1e:9f:3f:2e:85:db:8b:9e:02:5c:8a:a0:e6:ed:14:
4f:56:8a:9f:2e:da:e1:14:3d:84:64:46:ce:13:f0:
bd:ca:ae:86:14:ed:b7:d1:d3:26:55:2b:56:5c:7c:
41:16:c9:48:5f:7e:a3:93:a0:37:e7:b5:3c:f8:06:
d4:b6:50:e2:f3:3d:c0:33:76:2e:34:d6:e6:03:63:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:25:DC:8B:95:C8:99:20:6B:94:BF:CC:82:34:80:89:39:8D:67:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3836BECC3C611EFAB485485762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.130.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:04:b3:53:6a:ef:7c:d3:ad:8d:61:f7:45:a5:f2:ff:1a:26:
2c:e1:a5:bf:8f:ce:df:c5:67:b3:77:e2:34:28:af:59:64:64:
a0:c8:98:34:7e:76:20:10:bb:c8:36:b3:f1:34:b7:67:4d:3d:
87:e2:fb:f6:97:2a:b4:e4:ac:21:f8:8d:7c:e0:2a:b5:39:c8:
da:a4:e4:37:35:0b:15:78:58:e2:0c:4c:75:26:10:6a:96:ec:
ee:10:91:6d:92:e2:d2:6c:e1:5a:0c:64:2a:cc:02:6e:91:d9:
32:f0:81:6c:88:31:40:4b:9f:0b:34:31:aa:92:d8:be:c5:fa:
f9:32:ae:a8:e4:05:5c:61:ab:7f:ee:3c:08:aa:3a:68:ad:dd:
de:6e:f6:03:29:f0:02:2b:89:7f:42:6e:c3:f4:e3:56:5a:7d:
c7:5a:7b:b0:7c:11:7d:fc:53:f8:5f:e7:6c:c0:d5:80:2b:67:
ef:3a:bc:93:45:eb:7a:67:26:3b:d1:f0:93:04:e6:6a:ca:10:
3d:a4:99:62:5d:e2:e6:44:45:8e:d3:c8:9c:5f:52:00:f2:26:
c6:ac:e7:da:cf:47:71:e4:0d:be:04:a5:90:6b:81:b5:23:93:
8a:d7:d5:f6:0f:85:1a:ca:fb:a2:f7:bc:49:4a:9a:d1:bd:e0:
d7:2b:e8:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASfaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MjAyMTA5WhcNMjcxMjEyMjAyMTA5WjAYMRYw
FAYDVQQDEw02NzZkYmFiOS01NTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAur/OOQJ+O3uCnaWX5nj0B9msbLmM7RseD6B+heN4UircKhSHAxVqWoEb
WY7GuOSx76JGu5Jid1CZbhABiop6snp07pnETgW1NoyOuz+wXQ6eM/PCTjWEyICB
uZ3qqTVSk607nA9N99Yevj5l0jwm3aaKn36aTrwKJxliqvEIJ8co0pWDBgu4s3x7
pkXKsejRcSTUPHYRRaQVch+A0Hnr+4KhT4oBefCarN4cG675M7TZ598enz8uhduL
ngJciqDm7RRPVoqfLtrhFD2EZEbOE/C9yq6GFO230dMmVStWXHxBFslIX36jk6A3
57U8+AbUtlDi8z3AM3YuNNbmA2OHDwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPEl
3IuVyJkga5S/zII0gIk5jWfCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMzgzNkJFQ0MzQzYxMUVGQUI0ODU0ODU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlOCMA0GCSqGSIb3DQEB
CwUAA4IBAQDOBLNTau98062NYfdFpfL/GiYs4aW/j87fxWezd+I0KK9ZZGSgyJg0
fnYgELvINrPxNLdnTT2H4vv2lyq05Kwh+I184Cq1OcjapOQ3NQsVeFjiDEx1JhBq
luzuEJFtkuLSbOFaDGQqzAJukdky8IFsiDFAS58LNDGqkti+xfr5Mq6o5AVcYat/
7jwIqjpord3ebvYDKfACK4l/Qm7D9ONWWn3HWnuwfBF9/FP4X+dswNWAK2fvOryT
Ret6ZyY70fCTBOZqyhA9pJliXeLmREWO08icX1IA8ibGrOfaz0dx5A2+BKWQa4G1
I5OK19X2D4Uayvui97xJSprRveDXK+gB
-----END CERTIFICATE-----
Generated at Thu Apr 10 18:36:21 2025 by rpki-client